Opt-Out Guide
National Public Data Opt Out: Remove Your Info After the Massive 2024 Breach
In 2024, National Public Data suffered one of the largest data breaches on record, exposing approximately 2.9 billion records including Social Security numbers, home addresses, and family member information. Here's what happened, how to check if you were affected, and what to do about it.
Breach at a Glance
- • Records exposed: ~2.9 billion
- • Data included: Full names, SSNs, addresses (current and historical), relatives
- • Breach disclosed: August 2024
- • Company status: Filed for bankruptcy, October 2024
- • Ranking: One of the 3 largest data breaches in US history by record count
What Is National Public Data?
National Public Data (nationalpublicdata.com) was a background check aggregator that compiled records on virtually every US adult. The company harvested data from public records (court filings, voter rolls, property records, government databases) along with data purchased from other brokers, building profiles that included full legal names, current and historical addresses, phone numbers, Social Security numbers, and family relationships.
NPD sold access to individuals and businesses for background check purposes. Like most data brokers, it operated largely under the radar. Most people had never heard of it, yet it held detailed files on virtually every American adult.
The 2024 Breach: What Happened
In April 2024, a hacker group calling itself USDoD posted 2.9 billion records on the dark web forum BreachForums, offering the dataset for sale at $3.5 million. The data included full legal names, current and historical addresses going back decades, phone numbers, Social Security numbers, and detailed information about relatives.
NPD did not publicly acknowledge the breach until August 2024, months after the data had already circulated among cybercriminals. By that point, security researchers had confirmed the dataset's authenticity by cross-referencing it with known personal records.
In October 2024, National Public Data filed for bankruptcy, partly due to the dozens of class action lawsuits filed after the breach. The company is winding down operations.
Was Your Data Exposed?
Given the scale of the breach (2.9 billion records for a US population of roughly 335 million adults), it is highly likely that your data was included, possibly multiple times across different historical records. Social Security numbers for the vast majority of US adults are believed to have been included.
To check your exposure:
- 1
Run a free scan with GhostVault
Checks your email and name against breach databases including NPD and 500+ broker sites.
- 2
Check HaveIBeenPwned (haveibeenpwned.com)
Troy Hunt's breach database includes the NPD dataset. Enter your email to see if it appeared.
- 3
Monitor your credit reports
Visit annualcreditreport.com and check all three bureaus for accounts you don't recognize.
- 4
Watch for IRS notices
If someone files a tax return using your SSN, the IRS will contact you. Monitor your IRS account online.
How to Remove Yourself From National Public Data
NPD maintains an opt-out page, though its long-term availability is uncertain given the company's bankruptcy filing.
- 1Visit nationalpublicdata.com/opt-out.html in your browser.
- 2Enter your first name, last name, state, and date of birth.
- 3Review the records that appear and identify your listing.
- 4Select your record and submit the removal request.
- 5Complete any email verification step if prompted.
- 6Allow 24–72 hours for processing.
What to Do If Your SSN Was Exposed
If your Social Security number was part of the NPD breach — which is likely for most US adults — act on the following steps as soon as possible:
1. Place a credit freeze at all three bureaus
A credit freeze is free and prevents anyone from opening new credit accounts in your name. Freeze at Equifax (equifax.com/personal/credit-report-services), Experian (experian.com/freeze), and TransUnion (transunion.com/credit-freeze). Do all three.
2. Place a fraud alert
A fraud alert requires lenders to take extra steps to verify your identity before extending credit. A standard alert lasts 90 days (free, renew as needed). If you've been a victim of identity theft, you qualify for a 7-year extended alert.
3. Review your credit reports
Visit annualcreditreport.com and pull all three reports. Look for accounts, inquiries, or addresses you don't recognize. Report any errors to the bureau and to the creditor.
4. File IRS Form 14039 if needed
If you suspect someone has used your SSN to file a fraudulent tax return, submit Form 14039 (Identity Theft Affidavit) to the IRS. You can also request an IRS Identity Protection PIN to prevent future fraudulent filings.
5. Remove yourself from data brokers
Your SSN alone is less valuable to criminals if they can't pair it with your current address, employer, and family members. Removing your supplemental personal data from the 500+ broker sites that hold it makes you a harder target.
The Bigger Problem
National Public Data aggregated information from hundreds of other data brokers and public record sources. Even with NPD gone, the same data, your addresses, relatives, employment history, and in many cases your SSN, exists on 500+ other data broker sites that are still operational today.
Removing your profile from a bankrupt company that no longer serves your data provides minimal real-world protection. The meaningful action is removing your data from the active data broker ecosystem, the sites that are actively returning your information in response to searches right now. See the complete background check opt-out guide for step-by-step instructions across all major sites.
Related Articles
What Is a Data Broker?
Understand the industry that enabled the NPD breach.
How to Prevent Identity Theft
Practical steps to protect yourself after a data breach.
Is Your Info on the Dark Web?
How to check and what to do if it is.
Background Check Sites Opt-Out Guide
Remove yourself from the major background check aggregators.